Re: "When you shoot at the king, you best not miss." (Allen)

[Jeffrey Carr <greylogic.carr () gmail com>]

I agree entirely, Allen. The market incentives are huge for a company to
discover and report an attack attributed to a nation state, the bar for
evidence is negligible, and there's really no way to disprove a claim. Even
when someone involved in the attack pops up and says I did it, here's
proof, and you're an idiot, that becomes a "disinformation operation" and
again, there's no way to disprove that.

Jeff


> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 16 Jun 2016 21:28:42 -0400
> From: Allen <multimode1876 () gmail com>
> To: Adam Shostack <adam () shostack org>
> Cc: "dailydave () lists immunityinc com"
>         <dailydave () lists immunityinc com>
> Subject: Re: [Dailydave] "When you shoot at the king, you best not
>         miss."
> Message-ID:
>         <
> CADwYKiY5RYJ5s61QXLf+Hc7ZrgD1LCNbCcXt5qUsN8hv6c8kRA () mail gmail com>
> Content-Type: text/plain; charset="utf-8"
>
> | It's entirely possible that this is a disinformation campaign, or that
> attribution is hard, and Crowdstrike made a mistake
> |
>
> I'm inclined to believe that while attribution may be hard there are
> entirely too many market incentives to brand any given attack with one of
> the nation state animal totems.
>
> The fact that attribution is frequently derived from prior intelligence
> blended with the fact that all of the source data is confidential only
> lends itself to confirmation bias. A small attribution mistake by one
> vendor can really snowball.
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> https://lists.immunityinc.com/pipermail/dailydave/attachments/20160616/55ad132a/attachment-0001.html
> >
>
> ------------------------------
>
> _______________________________________________
> Dailydave mailing list
> Dailydave () lists immunityinc com
> https://lists.immunityinc.com/mailman/listinfo/dailydave
>
>
> End of Dailydave Digest, Vol 55, Issue 12
> *****************************************



-- 
Jeffrey Carr (jeffreycarr.com)
CEO, Taia Global, Inc. (taiaglobal.com)
Founder, Suits and Spooks (suitsandspooks.com)
Author, "Inside Cyber Warfare: Mapping the Cyber Underworld" (O'Reilly
Media, 2009, 2011)


THE CONTENTS OF THIS EMAIL ARE FOR THE RECIPIENT'S EYES ONLY AND MAY NOT BE
DUPLICATED OR DISTRIBUTED WITHOUT PRIOR PERMISSION.

_______________________________________________
Dailydave mailing list
Dailydave () lists immunityinc com
https://lists.immunityinc.com/mailman/listinfo/dailydave